Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
A spooler service process was hanging and its user memory dump shows many threads blocked waiting for critical sections (Volume 1, page 490) including the main one (Volume 1, page 437):
0:000> kL ChildEBP RetAddr 0007fa94 7c827d29 ntdll!KiFastSystemCallRet 0007fa98 7c83d266 ntdll!ZwWaitForSingleObject+0xc 0007fad4 7c83d2b1 ntdll!RtlpWaitOnCriticalSection+0×1a3 0007faf4 7c82dadf ntdll!RtlEnterCriticalSection+0xa8 0007fb94 7c82dad1 ntdll!LdrpGetProcedureAddress+0×128 0007fbb0 77e63db9 ntdll!LdrGetProcedureAddress+0×18 0007fbd8 01002ea1 kernel32!GetProcAddress+0×44 0007fc38 01002dbc spoolsv!__delayLoadHelper2+0×1d9 0007fc64 7d1e41fc spoolsv!_tailMerge_SPOOLSS+0xd 0007fcd8 7d1e1ed9 ADVAPI32!ScDispatcherLoop+0×287 0007ff3c 01004019 ADVAPI32!StartServiceCtrlDispatcherW+0xe3 0007ff44 010047a2 spoolsv!main+0xb 0007ffc0 77e6f23b spoolsv!mainCRTStartup+0×12f 0007fff0 00000000 kernel32!BaseProcessStart+0×23 0:000> !analyze -v -hang DERIVED_WAIT_CHAIN: Dl Eid Cid WaitType -- --- ------- -------------------------- 0 3990.3e80 Critical Section - > 18 3990.3f28 Critical Section PRIMARY_PROBLEM_CLASS: APPLICATION_HANG_HeapCorruption FOLLOWUP_IP: msvcrt!calloc+118 77bbcdf3 8945e4 mov dword ptr [ebp-1Ch],eax 0:018> kL 100 ChildEBP RetAddr 03b589b4 7c827d19 ntdll!KiFastSystemCallRet 03b589b8 77e76792 ntdll!NtWaitForMultipleObjects+0xc 03b58cec 7c8604ae kernel32!UnhandledExceptionFilter+0x7c0 03b58cf4 7c8282f1 ntdll!RtlpPossibleDeadlock+0xa5